Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,673All CVEsplus 19,141 rejected
- 692Last 24 hours2,975 in the last 7 days
- 17,156Last 30 days1,607 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 6 | 34 | 6 | 2 | 0 | 48 | 95 |
| 2025 | 1 | 25 | 11 | 1 | 0 | 38 | 47 |
| 2024 | 0 | 9 | 0 | 0 | 0 | 9 | 9 |
| Title | ||
|---|---|---|
| CVE-2026-74915 | GPU DDK - OOB write in UntwiddlePOTSquare64bppImagination Technologies · Graphics DDK | High8.8 |
| CVE-2026-74912 | GPU DDK - Fix for CVE-2026-49746 prevents the mapping of graphics buffers > 4GBImagination Technologies · Graphics DDK | Critical9.8 |
| CVE-2026-19199 | GPU DDK - OOB write due to freelist size integer overflow in RGXCreateHWRTDataSetImagination Technologies · Graphics DDK | High7.1 |
| CVE-2026-18629 | GPU DDK - libusc.so NPD due to integer overflow at ConvertSwitchToArrayLookup during WebGPU shader compilationImagination Technologies · Graphics DDK | High7.5 |
| CVE-2026-65587 | GPU DDK - OOB write in CalculateNPOTTwiddleSparsePageMap via TEXTURE_BASE_LEVEL changeImagination Technologies · Graphics DDK | Medium5.5 |
| CVE-2026-65586 | GPU DDK - Write UAF due to missing cleanup reference for abort command submitted via PVRSRVRGXKickTA3DKMImagination Technologies · Graphics DDK | High7.1 |
| CVE-2026-65584 | GPU DDK - Stack Buffer Overflow via undersized UFO address array in DumpStalledContextInfoImagination Technologies · Graphics DDK | High7.8 |
| CVE-2026-15466 | GPU DDK - Write UAF due to a race condition caused by insufficient locking in PVRSRVRGXCloseHWPerfClientStreamKM()Imagination Technologies · Graphics DDK | High7.0 |
| CVE-2026-45197 | GPU DDK - TOCTOU affecting psFWMemContext->uiPageCatBaseRegSetImagination Technologies · Graphics DDK | Low2.5 |
| CVE-2026-45200 | GPU DDK - Double free in _FreeOSPages due to incorrect allocation flag set by _EncodeAllocationFlagsImagination Technologies · Graphics DDK | High7.8 |
| CVE-2026-45202 | GPU DDK - Silent High-Order CMA Memory Leak & Double Free in `_FreeOSPages_Fast`Imagination Technologies · Graphics DDK | Medium5.5 |
| CVE-2026-45201 | GPU DDK - Incorrect page size validation in PhysmemNewRamBackedPMR could lead to OOB read and/or write of arbitrary physical memoryImagination Technologies · Graphics DDK | High7.8 |
| CVE-2026-45199 | GPU DDK - rgxfw_to_ptr() does not reject FW private data pointersImagination Technologies · Graphics DDK | High7.8 |
| CVE-2026-49746 | GPU DDK - Dimension Mismatch and Integer Truncation in PMRDevPhysAddrOSMemImagination Technologies · Graphics DDK | High7.1 |
| CVE-2026-45204 | GPU DDK - Out of bounds memory access and kernel NULL pointer dereference in DmaTransfer when pui64Address is a pointer to device memoryImagination Technologies · Graphics DDK | Medium5.5 |
| CVE-2026-45198 | GPU DDK - RGXFWIF_SYSINIT::sCorememDataStore is untrustedImagination Technologies · Graphics DDK | High7.8 |
| CVE-2026-16280 | GPU DDK - Integer overflow in _PMRLogicalOffsetToPhysicalOffsetImagination Technologies · Graphics DDK | Critical9.8 |
| CVE-2026-49745 | GPU DDK - Unvalidated sHWPerfCtlDMABuf GPU-VA, DMA-write into FW privdata via MMU ctx 0Imagination Technologies · Graphics DDK | High7.8 |
| CVE-2026-49744 | GPU DDK - Unchecked ui32TracePointer in rgxfw_log_ex()Imagination Technologies · Graphics DDK | High7.8 |
| CVE-2026-49743 | GPU DDK - Write UAF of sync checkpoint in GPU kick function after export fence file descriptor is prematurely closedImagination Technologies · Graphics DDK | High7.8 |
| CVE-2026-45203 | GPU DDK - rgxfw_hwperf_ufo() re-reads psCmdHeader->ui32CmdSize after initial check, TOCTOUImagination Technologies · Graphics DDK | High7.8 |
| CVE-2026-45196 | GPU DDK - Arbitrary GPU register write in rgxfw_hwperf_hw due to unsanitized pointers from host kernelImagination Technologies · Graphics DDK | High7.8 |
| CVE-2026-7639 | GPU DDK - Page UAF read in PMMETA_PROTECT heap memoryImagination Technologies · Graphics DDK | High7.8 |
| CVE-2026-41154 | GPU DDK - Incorrect Index Calculation in CMA Cleanup Path of AllocOSPages_SparseImagination Technologies · Graphics DDK | High7.8 |
| CVE-2026-34196 | GPU DDK - UAF read and/or write of arbitrary physical memory due to integer truncation in PMRDevPhysAddrOSMemImagination Technologies · Graphics DDK | High7.8 |
| CVE-2026-45195 | GPU DDK - rgxfw_set_mips_fault_address(&psInit->sFaultPhysAddr) is untrustedImagination Technologies · Graphics DDK | High7.8 |
| CVE-2026-21734 | GPU DDK - libusc OOB write at TreeRemove during WebGPU shader compilationImagination Technologies · Graphics DDK | High7.7 |
| CVE-2026-41156 | GPU DDK - kernel<->fw CCB contains SYNC_PRIMITIVE_BLOCK firmware address without holding referenceImagination Technologies · Graphics DDK | High7.7 |
| CVE-2026-34192 | GPU DDK - _MMU_AllocLevel error recovery paths leave dangling page table entriesImagination Technologies · Graphics DDK | High7.7 |
| CVE-2026-41158 | GPU DDK - Backed sparse PMRs are not handled by deferred free mechanism after shrinkImagination Technologies · Graphics DDK | High7.8 |
| CVE-2026-41157 | GPU DDK - OOB Write in CalculateNPOTTwiddleSparsePageMap3DImagination Technologies · Graphics DDK | Critical9.8 |
| CVE-2026-41155 | GPU DDK - SharedSecMem mapped into all GPU virtual address spacesImagination Technologies · Graphics DDK | Medium5.5 |
| CVE-2026-34195 | GPU DDK - Kernel heap OOB write in PMRChangeSparseMemOSMem due to incorrect physical page translation from virtual page indexesImagination Technologies · Graphics DDK | High8.8 |
| CVE-2026-34194 | GPU DDK - UAF read and/or write to arbitrary physical pages in DevmemIntChangeSparse due to incorrect calculation of the virtual index countImagination Technologies · Graphics DDK | High7.1 |
| CVE-2026-22164 | GPU DDK - Kernel heap OOB write in DevmemIntComputeVirtualIndicesFromLogicalImagination Technologies · Graphics DDK | High7.5 |
| CVE-2026-34193 | GPU DDK - Arbitrary write via UFO updates due insufficient pointer validation in rgxfw_to_ptr()Imagination Technologies · Graphics DDK | Medium4.3 |
| CVE-2026-22166 | GPU DDK - Write UAF in KEGLGetPoolBuffers, WebGL reachableImagination Technologies · Graphics DDK | High8.1 |
| CVE-2026-22165 | GPU DDK - UAF read of GLES3Context::psDrawParams and GLES3Context::psMode and UAF read/write of RMJob::apsCCBsImagination Technologies · Graphics DDK | High8.1 |
| CVE-2026-22167 | GPU DDK - Cache resident PM buffers writable by other GPU requestors, leading to arbitrary write to physical memoryImagination Technologies · Graphics DDK | High7.8 |
| CVE-2026-21733 | GPU DDK - Incorrect flags validation in RGXDerivePTEProt8 can allow GPU to overwrite read-only shared memory (e.g. libc.so)Imagination Technologies · Graphics DDK | High7.3 |
| CVE-2026-22163 | GPU DDK - Unsafe writing of MMU PT entries on systems with 32-bit host CPUImagination Technologies · Graphics DDK | High7.8 |
| CVE-2026-21732 | GPU DDK - libusc OOB write at ConvertSwitchToArrayLookupBP during WebGPU shader compilationImagination Technologies · Graphics DDK | Critical9.6 |
| CVE-2026-21736 | GPU DDK - Insufficient permission check in PhysmemWrapExtMem() when write attribute support enabledImagination Technologies · Graphics DDK | Medium4.4 |
| CVE-2025-13952 | GPU DDK - libusc UAF via WebGPU shaders at MergeConsecutiveBarriersBPImagination Technologies · Graphics DDK | Critical9.8 |
| CVE-2025-10865 | GPU DDK - DevmemIntGetReservationData does not ref the PMR it returnsImagination Technologies · Graphics DDK | High7.8 |
| CVE-2025-58411 | GPU DDK - Reservation::psMappedPMR can change while used by a freelist -> UAFImagination Technologies · Graphics DDK | High8.8 |
| CVE-2025-58409 | GPU DDK - Disguised freelist buffers passed to RGXCreateHWRTDataSet can cause arbitrary physical memory writes corrupting memoryImagination Technologies · Graphics DDK | Low3.5 |
| CVE-2025-25176 | GPU DDK - GPU Register value contents leaked from secure workloads to non-secure worldImagination Technologies · Graphics DDK | Critical9.1 |
| CVE-2025-58408 | GPU DDK - KASAN Read UAF in the PVRSRVBridgeRGXSubmitTransfer2 due to improper error handling codeImagination Technologies · Graphics DDK | Medium5.9 |
| CVE-2025-58407 | GPU DDK - TOCTOU bug affecting psFWMemContext->uiPageCatBaseRegSetImagination Technologies · Graphics DDK | High7.4 |